updated session handling so that page is reloaded if fake session is detected, or if client has gotten new ip address since session was created.
note: a session is only valid for one and only ip address.

updated heading as well.

#fno-23 deployed to dev